Hermes Agent

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 8, 2026
Last mentionedSep 28, 2026

Timeline

2 articles · newest first

Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

Carbonato installs Hermes Agent on hacked Docker hosts to run Telegram commands and steal AI API keys.

Dark ReadingSep 28, 20:23 UTC · Sep 28, 2026MalwareExploited1

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded FutureSep 8, 00:00 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+44 · 2 reads

Related CVEs

by mentions

CVE-2026-7289899%10.0
Unauthenticated SQL Injection in Metabase Grants Admin Access
published Aug 10, 2026MetabaseKEVPoC ×3
CVE-2026-919829%9.8
Unauthenticated RCE Chain in IBM Langflow OSS 1.0.0-1.10.0
published Jul 17, 2026IBM Langflow OSSKEVPoC
CVE-2025-6259360%9.4
Actively Exploited Browser-Based RCE in Ray AI Compute Engine
published Nov 26, 2025Ray-Project (Anyscale) RayKEVPoC
CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-598002%9.2
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
published Jul 7, 2026
CVE-2026-33954%5.5
A flaw has been found in MaxSite CMS up to 109.1
published Mar 1, 2026max-3000 maxsite cms

Appears with

CISAorganization · 1
Metabaseproduct · 1
sudoproduct · 1
IBM Langflowproduct · 1
Zimbravendor · 1
PaperCut NG/MFproduct · 1
IBM Langflowvendor · 1
Insikt Grouporganization · 1
DeepSeekai model · 1
Telegramproduct · 1
PentestGPTai model · 1
Microsoft Windowsproduct · 1
Metabasevendor · 1
Red Hatvendor · 1
Rayproduct · 1
Red Hat Libuserproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.